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II. AMENDMENTS TO THE CLAIMS 

The fol lowing listing of claims replaces all prior versions, and listings, 
application: 



oJ 'claims in the 



1 . (Currently amended) A computer implemented method for reviewing a business process 
to identify and address risks, comprising the steps of: 
providing a business process; 

identifying risks in the business process as control points; and 
arranging information pertaining to the control points in a standatd formit using a 
template and storing the template in a computer database to provide subsequent access to the 
template, wherein the information comprises a set of tests to be performed bv a test entity, and 



wherein the set of tests identify risks in the business process . 

2. (Original) The method of claim 1, further comprising the steps of: 

identifying actions to address the risks; 
arranging the identified actions in the template; and 
performing an audit using the template. 

3. (Original) The method of claim I, wherein the step of identifying risks comprises the step of 
implementing a set of tests to identify risks in the business process. 
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4. (Currently amended) The method of claim I, wherein the information ft rfbtcr 
compri$es[[:]] 

p set of t e sto r whoroin tho set of t e sts id e ntify risks in th e- b «si nogg proooot i ; ond 
a set of actions, wherein the set. of actions address the risks. 

5. (Original) The method of claim 4, wherein the information further comprise >: 

a business process; 

a test entity, wherein the test entity performs the set of tests; 

an action enti ty, wherein the action entity performs the set of actions; auc 

audit details. 

6. (Original) The method of claim 5, wherein the information further comprises: 

a control point name; 
control point revisions; 
background information; and 
a control point frequency. 

7. (Currently amended) A computer implemented method for reviewing a business process 
to identify and address risks, comprising the steps of: 

providing a business process; 

implementing a set of tests to he performed by_a test entity to identify risks in the 
business process as control points; 
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identifying a set of actions to address the identified risks; and 
arranging the set of tests and the identified action s in a standard format 
and storing the template in a computer database to provide subsequent access to 



u&ing a template, 
:he template. 



8. (Original) The method of claim 7, wherein the set of tests and the set of actions comprise 
control point information. 

9. (Previously presented) The method of claim 7, further comprising the step) of accessing 
the stored template to perform an audit, 

10. (Currently amended) A computer implemented method for reviewing a tyusiness process 
to identify and address risks, comprising the steps of: 

providing a business process; 

implementing a set of tests to be performed by a test entity to identify rislfcs in the 
business process as control points; 

identifying a set of actions to address the identified risks; 

arranging the business process, the set of tests, and the identified actions 
format using a template, and storing the template in a computer database to provide 
access to the template; and 

auditing the control, points based on the template. 

11. (Original) The method of claim 10, wherein the implementing step comprised the step of 
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examining steps in the business process to identify risks. 

1 2. (Currently Amended) A computer implemented method for arranging business process 
control point information in a template, comprising the steps of: 

arranging a set of tests to be performed bv a test entity in a test field, whefrein the set of 
tests identifies risks in a business process; and 

arranging a set of actions in an action field, wherein the set of actions acidoses the 
identified risks. 

13. (Original) The method of claim 12 f further comprising the steps of: 

arranging a business process in a business process field; 

arranging a test entity in a test execution field, wherein the test entity performs the set of 

tests; 

arranging an action entity in an action execution field, wherein the action 
the set of actions; and 

arranging audit details in an audit field. 



entity performs 



14. (Original) The method of claim 13, further comprising: 
arranging a control point name in a name field; 
arranging control point revisions in a revision field; 
arranging background information in an information field; and 
arranging a control point frequency in an interval field. 
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15, (Previously presented) The method of claim 12, further comprising the st^p of performing 
an audit based on the stored template. 

16. (Currently amended) A computer implemented method for arranging business process 
control point information in a template, comprising the steps of: 

arranging a business process in a business process field; 

arranging a set of tests to be performed by a test entity in a test field, wherein the set of 
tests identifies risks in the business process; and 

arranging a set of actions in an action field, wherein the set of actions addresses the 
identified risks. 



steps 



per ft 



1 7. (Previously presented) The method of claim 1 6, further comprising the i 
arranging a test entity in a test execution field, wherein the test entity ] 

tests; 

arranging an action entity in an action execution field, wherein the actior entity performs 
the set of actions; and 

arranging audit details in an audit field; 

storing the template in a computer database to provide subsequent accesd to the template; 

and 

performing an audit based on the stored template. 
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18. (Original) The method of claim 17, further comprising; 
arranging a control point name in a name field; 
arranging control point revisions in a revision field; 
arranging background information in an information field; and 
arranging a control point frequency in an interval field. 



joint 



wherein the set of 



19. (Currently amended) A template for arranging business process control 
information, comprising: 

a test field for arranging a set of tests to be performed by a test entity , 
tests identifies risks in a business process; and 

an action field for arranging a set of actions, wherein the set of actions addresses the 
identified risks. 

20. (Original) The template of claim 19, further comprising: 

a business process field for arranging a business process; 

a test execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 

an action execution field for arranging an action entity, wherein the actioji i 
performs the set of actions; and 

an audit field for arranging audit details. 
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21 . (Original) The template of claim 20, further comprising: 
a name field for arranging a control point name; 
a revision field for arranging control point revisions; 
an information field for arranging background information; and 
an interval field for arranging a control point frequency. 



22. (Original) The template of claim 19, wherein the risks comprise control points, and wherein 
the set of tests and the set of actions comprise control point information. 

23. (Currently amended) A template for arranging business process control joint 
information, comprising: 

a business process field for arranging a business process; 

a test field for arranging a set of tests to be performed bv a test entity, whjerein the set of 
tests identifies risks in the business process; and 

an action field for arranging a set of actions, wherein the set of actions addresses the 
identified risks. 

24. (Original) The template of claim 23 t further comprising: 

a test execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 

an action execution field for arranging an action entity, wherein the acticjn entity 
performs the set of actions; and 
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an audit field for arranging audit details. 



25. (Original) The template of claim 24, further comprising: 
a name field for arranging a control point name; 
a revision field for arranging control point revisions; 
an information field for arranging background information; and 
an interval field for arranging a control point frequency. 



26. (Currently amended) A template for arranging business process control point 
information, comprising: 

a business process field for arranging a business process; 

a test field for arranging a set of tests to he performed by a test entity , wherein the set of 
tests identifies risks in the business process steps; 

an action field for arranging a set of actions, wherein the set of actions addresses the 
identified risks; 

a te$t execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 

an action execution field for arranging an action entity, wherein the acticjn entity 
performs the set of actions; and 

an audit field for arranging audit details. 

27. (Currently amended) The template of claim 26, further comprising: 
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a name field for arranging a control point name; 

a revision history field for arranging control point revisions , wherein the 



revision history 



field includes fields for arranging a revision number, a revision date, a summary 



changes marked : 

an information access field for arranging background informatio n, where n. the 



information access field includes at least one hypertext link that allows direct access to the 



background information : and 

an interval field for arranging a control point frequency. 



28. (Currently amended) A program product stored on a recordable medium) : 
business process control point information in a template, comprising: 

an interface for receiving business process control point information; 

a template for arranging the received information, wherein the template comprises: 

a test field for arranging a set of tests to be performed bv a test entity, wbjerein the set of 
tests identifies risks in a business process; and 

an action field for arranging a set of actions, wherein the set of actions addresses the 
identified risks. 

29. (Original) The program product of claim 28> wherein the template further ccmprises: 

a business process field for arranging a business process; 

a test execution field for arranging a test entity, wherein the test entity performs the set of 

tests; 
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an action execution field for arranging action entities, wherein the action 
the set of actions; and 

an audit field for arranging audit details. 



30. (Cun-ently amended) The program product of claim 29, wherein the temblate further 
comprises: 

a name field for arranging a control point name; 

a revision history field for arranging control point revisions , wherein the i-evision history 



field includes fields for aiTanjdn^ajrc^ a summary of changes^ and 



changes marked : 

an information access field for arranging background informatio n, wherein \ 



the 

information access field includes at least one hypertext link that allows direct access to the 



background information : and 

an interval field for arranging a control point frequency. 
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